General

  • Target

    4445051491aed9c868c6641f7b2ff844047b5e61414bbc6e440ef2d7202348a5.zip

  • Size

    16KB

  • MD5

    76adda028de4e9940c275daf0367aa77

  • SHA1

    4797bc1e3db68e7efd001a99f13e28539be270be

  • SHA256

    0afb269e77379bc934e8c7aa7bc938938d587683ababd155909be31f4dabadc8

  • SHA512

    08dde27b5e56151d6523b4d407c389af62facc71e1dfc4636a3fc51af813293b58ab99184237a2648dd8c8e3e9ca94ec04b4aa66e09e727edb73e07cfd6b11f2

  • SSDEEP

    384:eJxgwNmp+j+UR1EWhXtoja8MjM96QSxM69hdv4yw70bu4C:vKg+p1lNjSyWCuB

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

0.tcp.sa.ngrok.io:19784

Mutex

d129900b08bb5de7ee3568103142da72

Attributes
  • reg_key

    d129900b08bb5de7ee3568103142da72

  • splitter

    |'|'|

Signatures

Files

  • 4445051491aed9c868c6641f7b2ff844047b5e61414bbc6e440ef2d7202348a5.zip
    .zip

    Password: infected

  • 4445051491aed9c868c6641f7b2ff844047b5e61414bbc6e440ef2d7202348a5.exe
    .exe windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections